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Categories and Subject Descriptors: F.4.1 [Mathematical Logic and Formal Languages]: 
Mathematical Logic — Modal Logic; Computational Logic; F.2.2. [Analysis of Algorithms and 
Problem Complexity]: Nonnumerical Algorithms and Problems — Complexity of Proof Proce- 
dures 

General Terms: Algorithms, Languages, Theory 

Additional Key Words and Phrases: Shallow models, resolution, coalgebra 



1. INTRODUCTION 

Modal logics are attractive from a computational point of view, as they often com- 
bine expressiveness with decidability. For many modal logics not involving dy- 
namic features, satisfiability is known to be in PSPACE. This is typically proved 
for one logic at a time, e.g. by modifications of the witness algorithm for the 
modal logic K [Ladner 1977; Blackburn et al. 2001], but also using markedly dif- 
ferent methods such as the constraint-based PSPACE-algoiithm for graded modal 
logic [Tobies 2001]. Vardi [1989] gives a first glimpse of a generalisable method, 
equipping various epistemic logics with a neighbourhood frame semantics and show- 
ing them to be in NP and PSPACE, respectively (with the K axiom being respon- 
sible for /'5'F.ACiJ-hardness; recent work by Halpern and Rego [2007] shows that 
negative introspection brings the complexity back down to NP). Nevertheless, there 
is to date no generally applicable theorem that allows establishing PSPACE-honnds 
for large classes of modal logics in a uniform way. 

Here, we generalise the methods of [Vardi 1989] to obtain PSPACE bounds for 
rank-1 modal logics, i.e. logics axiomatisable by formulas whose modal depth uni- 
formly equals one, in a systematic way. Although presently limited to rank 1, our 
approach covers numerous relevant and non-trivial examples. We recover known 
PSPACE bounds not only for normal modal logics such as K and KD, but most 
notably also for a range of non-normal modal logics such as graded modal logic [Fine 
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1972], coalition logic [Pauly 2002], and probabilistic modal logic [Larsen and Skou 
1991; Heifetz and Mongin 2001]. Moreover, our methods lead to a previously un- 
known PSPACE upper bound for majority logic [Pacuit and Salamc 2004] that 
was independently discovered by Demri and Lugiez [2006] at the same time. These 
logics are far from exotic: graded modal logic plays a role e.g. in decision sup- 
port and knowledge representation [van der Hoek and Meyer 1992; Ohlbach and 
Koehler 1999], and probabilistic modal logic has appeared in connection with model 
checking [Larsen and Skou 1991] and in modelling economic behaviour [Heifetz and 
Mongin 2001]. 

The key to such a degree of generality is to parametrise the theory over the type 
of systems defining the semantics, using coalgcbraic methods. Coalgebra conve- 
niently abstracts from the details of a concrete class of models as it encapsulates 
the precise nature of models in an endofunctor on the category of sets. As spe- 
cific instances, one obtains e.g. (serial) Kripke frames, (monotone) neighbourhood 
frames [Hansen and Kupke 2004], game frames [Pauly 2002], probabilistic transi- 
tion systems and automata [Rabin 1963; Bartels et al. 2004], weighted automata, 
linear automata [Carlyle and Paz 1971], and multigraphs [D'Agostino and Visser 
2002]. Despite the broad range of systems covered by the coalgebraic approach, 
a substantial body of concepts and non-trivial results has emerged, encompassing 
e.g. generic notions of bisimilarity and coinduction [Bartels 2003], corecursion [Turi 
and Plotkin 1997], duality, and ultrafilter extensions [Kupke et al. 2005]. On the 
applications side, coalgebraic modal logic features in actual specification languages 
such as the object oriented specification language CCSL [Rothe et al. 2001] and 
CoCasl [Mossakowski et al. 2006]. 

The coalgcbraic study of computational aspects of modal logic was initiated 
in [Schroder 2007], where the finite model property and associated NEXPTIME- 
bounds were proved. Here, we push these results further and present a shallow 
model property based on coalgebraic semantics. This leads to a generic PSPACE- 
algorithm for deciding satisfiability that traverses a shallow model and strips off 
one layer of modalities in every step. Alternatively, our algorithm may be seen as 
computing a shallow proof that enjoys a number of pleasant proof-theoretic prop- 
erties, including a weak subformula property (i.e. it mentions only propositional 
combinations of subformulas of the goal). 

The model construction relies on extending the axiomatisation of a given logic 
to a set of rules which is closed under rule resolution, i.e. every resolvent of two 
substituted rule conclusions can also be derived directly using a third rule. This 
process typically results in an infinite but recursive set of rules. Resolution closed- 
ness then enables us to build the shallow model using induction on the modal depth 
of formulas. Since we are working with an infinite set of rules, we have to impose 
a second condition to ensure that we can dc;c;icie satisfiability: a rule set is closed 
under contraction if every substituted rule conclusion with duplicate literals can 
be derived using a substitution instance of a second rule in whose conclusion all 
literals remain distinct. The decision procedure will run in PSPACE if both clo- 
sure under resolution and closure under contraction can be controlled, i.e. there is 
a polynomial bound on the size of rules that are applicable at every step of the 
deductive process. This turns out to be the case for all examples mentioned above. 
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The material is organised as follows. In Section 2, we give a brief introduction to 
the generic coalgebraic semantics of modal logic. In Section 3, we discuss deduction 
systems for coalgebraic modal logics and their properties, notably the (equivalent) 
central notions of strict one-step completeness and reduction closedness of rule sets. 
Sections 4 and 5 are devoted to the tableau-based shallow model construction and 
the proof-theoretic view thereof. The ensuing PS'PA CE-algorithm and its example 
applications arc presented in Section 6. 

2. COALGEBRAIC MODAL LOGIC 

We briefly recapitulate the basics of the coalgebraic interpretation of modal logic. 
To begin, we fix the syntactic framework. A modal signature is just a set A of 
unary modal operators (all our results generalise straightforwardly to a polyadic 
setting as in [Schroder 2005]). The signature A induces a modal language .F(A), 
with formulas <?i, V' S defined by the grammar 

(j)::= ± I (l>Ail) I -.(/. I L(f>, 

where L ranges over A. Disjunctions (pV truth T, and other boolean operations 
are defined as usual. The depth of a formula is its maximal nesting depth of modal 
operators. 

We work in the framework of coalgebraic modal logic, introduced by Pattinson 

[2004], generalising previous results [Jacobs 2000; Rofiiger 2000; Kurz 2001; Pattin- 
son 2001], where modal languages are interpreted over coalgebras for a Set-functor: 

Definition 2.1. [Rutten 2000] Let T : Set — > Set be a functor, referred to as the 
signature functor, where Set is the category of sets. A T-coalgebra A = {X,^) is 
a pair {X,^) where X is a set (of states) and ^ : X ^ TX is a function called the 
transition function. A morphism f : B between T-coalgebras A = (A, ^) and 
B = {Y, C) is a map f:X^Y such that T/^ = C/. 

We view coalgebras as generalised transition systems: the transition function de- 
livers a structured set of successors and observations for a state. Mutatis mutandis, 
we can in fact allow T to take proper classes as values, as we never iterate T or 
otherwise assume that TX is a set; details are left implicit. This allows us to treat 
more examples, in particular Pauly's coalition logic (Example 2.7.8 below). 

Assumption 2.2. We can assume w.l.o.g. that T preserves injective maps [Barr 
1993] . For convenience of notation, we will in fact sometimes assume that TX C TV 
in case X CY. Moreover, we assume w.l.o.g. that T is non-trivial, i.e. TX = 

A = (otherwise, TA = for all A). 

Definition 2.3. If for a subset Z C AT of a coalgebra A = (X,^), ^ restricts to 
a map : Z — > TZ, then C = {Z,^z) is a subcoalgbra of A; in this case, the 
inclusion Z ^ X is a. morphism C A. 

In the same way that the signature functor abstracts from a concrete class of 
models, the interpretation of modal operators is encapsulated in terms of predicate 
liftings: 

Definition 2.4. A predicate lifting for a functor T is a natural transformation 



Q^QoT^P, 
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where Q denotes the contravariant powerset functor Set°^ Set (i.e. Q{X) = 
ViX) is the powerset, and Qf{B) = /"^B] for / : X ^ F and B e Q(X)). 

A coalgebraic semantics for a modal signature A is given by a A-structure, consisting 

of a signature functor T and an assignment of a predicate lifting |L] for T to every 
modal operator L G A; by abuse of notation, we refer to the entire A-structure just 
as T. Given a A-structure T, the satisfaction relation \=c between states a; of a 
T-coalgebra C = (A, ^) and jr(A)-formulas is defined inductively, with the usual 
clauses for the boolean operations. The clause for the modal operator L is 

where {(pj^ = {x e A | x \=c (/>}■ We drop the subscripts C when these are clear 
from the context. 

We occasionally make use of the fact that the logic J^(A) is adequate for T- 
coalgebras [Pattinson 2004]: 

Proposition 2.5. If f : A-^ B is a morphism of T-coalgehras, then 

x\=A(l) iff f{x) \=B (t> 

for all states x in A and all (A) -formulas 4>. 

Our main interest here is in the local satisfiability problem: 

Definition 2.6. An .F(A)-formula (p is satisfiable (over T) if there exist a T- 
coalgebra A — (A, ^) and a state a; in A such that x \=a 4>- Dually, (p is valid 
if X |=A (j) for all T-coalgebras A — (A, ^) and all a; G A. 

Example 2.7. [Pattinson 2004; Cirstea and Pattinson 2007; Schroder 2007] We 
illustrate how the coalgebraic approach subsumes a large class of modal logics. 
This includes not only logics with a standard Kripkc semantics, but in particular 
also non-normal modal logics whose semantics is defined over structures that differ 
substantially from classical Kripke frames. 

(1) Modal logic K: The signature A^ of the modal logic K consists of a single 

modal operator □. Let V be the covariant powerset functor. Then P-coalgebras arc 
graphs, thought of as transition systems or indeed Kripke frames. A A/f-structure 
over V is defined by 

IU\^{A) = {B&V{X)\B'ZA]- 

this induces precisely the standard Kripke semantics of modal logic (note that no 

restrictions are imposed on frames). 

(2) Modal logic KD: KD is obtained from K by adding the axiom -•□-L, i.e. 
by restricting the semantics to serial Kripke frames {X,R), characterized by the 
condition that for every state x, there exists a state y such that xRy. Thus, the 
signature Akd of the normal modal logic KD is the same as that of K, and a Akd- 
structure is defined in the same way as for K, but over the non-empty powerset 
functor r* defined by V*{X) = {A € P{X) | A 9^ 0}. 

(3) Modal logic E: The signature A^; of the modal logic E, the smallest classi- 
cal modal logic [Chellas 1980], has a single modal operator □; the proof system of 
E comprises, besides prepositional reasoning, only replacement of equivalents (i.e. 
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the rule a <-> 6/na — > Ob). The standard neighbourhood semantics of E is coalge- 
braically captured by a A^-structure over the neighbourhood functor N = Qo Q°p 

(composition of the contravariant powcrsct functor with itself); coalgcbras for this 
functor are neighbourhood frames. The modal operator □ is interpreted over TV by 

Pjxi^) = {o^^N{X)\Aea}. 

(4) Modal logic M: The modal logic M, the smallest monotonic modal 
logic [Chellas 1980], is obtained from the modal logic E by adding the mono- 
tonicity rule a h/Ua Ub. The neighbourhood semantics of M is captured 
coalgebraically analogously to the previous example as a structure over the sub- 
functor {ipP oi N assigning to a set X the set of upwards closed subsets of QX. 
Coalgebras for UpT' are monotone neighbourhood frames [Hansen and Kupke 2004]. 

(5) Graded modal logic [Fine 1972]: The modal signature of graded modal logic 
(GML) is Kqml = {Ofc I k G N}; the intended reading of Ok(j) is '</> holds in more 
than k successor states'. The semantics of GML is originally defined by count- 
ing successor states in Kripke frames. This semantics fails to be coalgcbraic, as 
the naturality condition for the associated predicate liftings fails. However, one 
may define a coalgebraic semantics which is equivalent for purposes of satisfiabil- 
ity [Schroder 2007], as follows. The finite multiset (or bag) functor B maps a set X 
to the set of maps i? : X — > iNl with finite support, the intuition being that B is 
a multiset containing x G X with multiplicity B{x). We extend B to 'P{X) by 
putting B(A) = X^kgA ^(•^)- The action on morphisms f : X ^ Y is then given by 
Bf : BX — > BY, B i— > Xy. B{f~^[{y}]). Coalgebras for B are directed graphs with 
IH-weighted edges, often referred to as multigraphs [D'Agostino and Visser 2002]. 
The graded modal operator Ok is intepreted over B by 

[Ofelx(^) = {-B : X ^ N G B{X) I B{A) > k}. 

Thus, X 1= Ofc(/> for a state x in a B-coalgebra iff ^ holds for more than k successor 
states of X, taking into account multiplicities. 

The dual operators -iOk~' are denoted Dfe, i.e. Dk4> reads '(/) fails in at most k 
successor states'. Note that Ok is monotone, but fails to be normal unless k = 0. A 
non-monotone variation of GML arises when negative multiplicities are admitted. 

(6) Majority logic [Pacuit and Salame 2004] : Graded modal logic is extended to 
majority logic by adding a weak majority operator W, read 'in at least half of the 
successor states, it is the case that . . . '. The structure for GML over the multiset 
functor B described in the previous example is extended to W by putting 

[iyi;y(74) = {S : X ^ N e B{X) \ B{A) > B{X - A)}. 

The dual operator M = -^W^ captures strict majority 'in more than half of the 
successor states, it is the case that'. 

(7) Probabilistic modal logic [Larsen and Skou 1991; Heifetz and Mongin 2001]: 
The modal signature Apml of probabilistic modal logic (PML) comprises opera- 
tors Lp, p G [0, 1] n (Q, to be read 'in the next step, it is with probability at least p 
the case that. . . '. We define a ApML-structure over the finite distribution func- 
tor which maps a set X to the set of probability distributions on X with finite 
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support. Coalgebras for D^^ are probabilistic transition systems (also called prob- 
abilistic type spaces [Heifetz and Mongin 2001]) with finite branching degree. Our 
definition contrasts with that of [Hcifctz and Mongin 2001], where there is no re- 
striction on the branching degree, but since PML has the finite model property (cf. 
loc. cit.), this has no bearing on satisfiability. The interpretation of Lp over Du, is 
defined by 

lLj,j{A)={P€D^X\PA>p}. 

PML is non-normal (Lp{a V 6) LpU V Lpb is not valid for p > 0). 

(8) Coalition logic [Pauly 2002]: Let A'' = {1, . . . , n} be a fixed set of agents. 
Subsets of N are called coalitions. The signature Acoai of coalition logic consists 
of modal operators [C], where C ranges over coalitions, read 'coalition C has a 
collaborative strategy to ensure that . . . '. A coalgebraic semantics for coalition 
logic is based on the class-valued signature functor T defined by 

TX = {{Su ...,Sn,f)\<D^Si€ Set, / : UteN ^ X}. 

The elements of TX are understood as strategic games with set X of states, i.e. 
tuples consisting of nonempty sets Si of strategies for all agents i, and an outcom,e 
function ([{ Si) X. A T-coalgebra is a game frame [Pauly 2002]. We denote the 
set HiGC ^c, and for ac & Sc, (Jc ^ '^c^ where C = N — C, {ac, <^c) denotes 
the obvious element of Hie at ^i- Acooi-structure over T is then defined by 

l[C]\x{A) = {{Su ...,Sn,f)eTX\ 3ac & Sc-^cjc G S^. f{ac, ac) e A}. 

All the above examples can be canonically extended to systems that process 
inputs from a set / by passing from the signature functor T to one of the functors 
or T{I X _) and suitably indexing the modal operators. We refer to [Cirstea and 
Pattinson 2007] for a detailed account of the induced logics. 

Remark 2.8. In the modal grammar given above, atomic propositional symbols 
are deliberately not included. This is for the sake of both generality, as some 
modal logics such as Hennessy-Milner logic do not include such atomic propositions, 
and economy of presentation, as a set U of atomic propositional symbols may be 
integrated in the basic framework as follows. Given a modal signature A and a 
A-structure T, we define a structure for the modal signature Ajj = AuU over the 
functor Tu defined by TjjX = TX x V{U): modal operators from A are interpreted 
by taking the preimage of their interpretation over T under the projection Tu T, 
and a propositional symbol a €.U is interpreted by putting 

la]^{A) = {(i, B)eTXx V{U) \ a € B}. 

Since [a] is independent of its argument, the modal operator a can be written as 
just the propositional symbol a (without an argument formula). In a framework 
with polyadic modal operators [Schroder 2005] , propositional constants correspond 
to nuUary modalities. Some of the logics above indeed require propositional symbols 
lest they collapse into triviality. This holds in those cases where Tl (for 1 a singleton 
set) is a singleton, e.g. probabilistic modal logic, coalition logic, and the modal 
logic KD. We nevertheless generally continue to omit the treatment of propositional 
symbols in the sequel, since the addition of propositional symbols as indicated above 
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has no bearing on the rule sets forming the core of our method, and the model 
construction is entirely analogous. 

3. PROOF SYSTEMS FOR COALGEBRAIC MODAL LOGIC 

Our decision procedure for rank-1 logics relies on a complete axiomatisation in a 
certain format. Deduction for modal logics with coalgebraic semantics has been 
considered in [Pattinson 2003; Cirstea and Pattinson 2007; Kupke et al. 2005; 
Schroder 2007]. It has been shown that every modal logic over coalgebras can be 
axiomatised in rank 1 using either rank-1 axioms or rules leading from rank to 
rank 1 [Schroder 2007], essentially because functors, as opposed to comonads, only 
encode the one-step behaviour of systems. Here, we focus on rules. The crucial 
ingredients for the shallow model construction and the ensuing PSPACE algorithm 
are novel notions of resolution closure and strict one-step completeness of rule sets. 

For the remainder of the paper, we fix a modal signature A and a A-structure T. 
We recall a few basic notions from propositional logic, as well as notation for coal- 
gebraic modal logic introduced in [Pattinson 2003; Cirstea and Pattinson 2007]: 

Definition 3.1. Wo denote the set of propositional formulas over a set V (con- 
sisting e.g. of propositional variables or modal formulas) by Prop(F). Here, we 
regard -> and A as the basic connectives, with all other connectives defined in the 
standard way. For £ Prop(y), we say that propositionally entails and write 
l~PL V' if </* ^ is a propositional tautology. Similarly, $ C Prop(F) proposition- 
ally entails ijj {^^pl 4>) if there exist (pi, . . . ,<pn & ^ such that A • • • A(/)„ \-pL tp- 

A literal over V is either an clement of V or the negation of such an element. We 
use the meta-variable e (possibly indexed) to denote either nothing or -i, so that a 
literal over V has the general form ea, a gV. A clause is a finite (possibly empty) 
disjimction of literals, which then takes the form Vi=i ^i^i with ai, . . . ,a„ G V. 
Similarly, a conjunctive clause is a finite conjunction of literals. A (conjunctive) 
clause is contracted if all its literals are distinct. The set of all clauses over V 
is denoted by C\{V). Although we regard clauses as formulas rather than sets of 
literals, we shall sometimes use terminology such as 'a literal is contained in a 
clause' or 'a clause contains another', with the obvious meaning. We denote by 
Up{V) the set {La\LeA,ae V}. 

If V consists of propositional variables, then we have the usual notions of valua- 
tion and substitution: A valuation is just a map k iV ^ {T, ±} assigning boolean 
truth values to variables; for (p G Prop(V), we write k ^ if k is a satisfying 
valuation for (p. More generally, given a set X, a V{X) -valuation for F is a map 
V — > 'P{X). For (p G Prop(F), a ■p(X)-valuation r induces in the obvious way a 
subset \(P\t of X] we write X.t \= (p \i \(P'\t = X. Using the structure T for A, we 
interpret ip € Prop(Up(y)) as a subset {-iplr of TX by putting {LcpjT = [i]|(/)lr, 
and we write TX, t \= ip if fipjT = TX. Moreover, given a set Z, a Z -substitution 
for F is a map a : V ^ Z; for a formula (j) over V (e.g. (p G Prop(Up(Prop(F)))), 
we denote the result of performing the substitution cr on </> by (pa and refer to <pa 
as a Z-instance of (p. 

Lemma 3.2. For (p,tp £ C\{V), (p \-pL ip iff either (p is contained in tp or 'tp is a 
tautology (i.e. contains both a and ->a for some a gV). □ 
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Definition 3.3. A (one-step) rule R over a set V of propositional variables is 
a rule ^/V', where (j) e Prop(y) and V G CI(Up(V^)). We silently identify rules 
modulo a-cquivalcncc. The rule R is sound if, whenever (fxr is valid for an .^(A)- 
substitution a, then -^cr is valid. Moreover, R is one-step sound if TAT, t |= for 
each set X and each 'P(A')-valuation r such that A", r |= 0. 

Our hitherto informal use of the term rank-1 logic formally means axiomatisable 

by one-step rules. The term rank-l logic has been used in the literature [Pattinson 
2003; Cirstea and Pattinson 2007; Kupke et al. 2005; Schroder 2007] to describe 
logics axiomatisable by rank-1 axioms, i.e. propositional combinations of formu- 
las L(j) where L is a modal operator and (j) is purely propositional (in the notation 
introduced above, formulas from Prop(Up(Prop(y)))). This class of axioms includes 
e.g. the K axiom 0(0 —> 6) — > (Da — > Ob), but excludes axioms containing nested 
modalities or top-level propositional variables such as the axioms 4 and T, respec- 
tively. It has been shown in [Schroder 2007] that one-step rules and rank-1 axioms 
determine the same class of logics. 

Remark 3.4. We can always assume that every propositional variable a appear- 
ing in the premise </) of a one-step rule appears also in the conclusion: otherwise, 
we can eliminate a by passing from cf) to (f)[T /a] V (f)[J-/a\. 

Proposition 3.5. [Schroder 2007] Every onc-stcp sound rule is sound. □ 

The converse holds under additional assumptions [Schroder 2005]; note however 
that the obviously sound rule J-/_L is one-step sound iff T0 = (as is the case e.g. 
for PML). 

A given set TZ of one-step sound rules induces a proof system for J'{A) as follows. 

Definition 3.6. Let TZc denote the set of rules obtained by extending TZ with the 
congruence rule 

^ La ^ Lb 

for every L £ A. (This rule of course implies a rule where — > is replaced by which 
however does not fit the format for one-step rules.) The set of provable formulas 
is the smallest set closed under propositional entailment and the rules in TZc, with 
propositional variables instantiated to formulas in ^(A). We say that a formula (j) 
is consistent if -icj) is not provable. 

It is easy to see that this proof system is sound. Completeness requires 'enough' 
rules in the following sense. 

Definition 3.7. The set TZ is (strictly) one-step complete if, whenever TX, t \= x 
for a set AT, x e CI(Up(V)), and a 'P(A)-valuation r, then x is (strictly) provable 
over X,T, i.e. propositionally entailed by clauses (a clause) ipa where (ji/ip G TZc 
(Definition 3.6) and cr is a Prop(y)-substitution (a F-substitution) such that X,t \= 



Strict one-step completeness is one of crucial notions in this work. Its distinc- 
tive feature is that strict provability largely dispenses with propositional reasoning 
by restricting instantiations to propositional variables, and by replacing general 
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propositional entailment by the rather trivial concept of prepositional entailment 
between single clauses (cf. Lemma 3.2). This plays a central role in the shallow 
model construction presented in Section 4. 

Remark 3.8. It is shown in [Schroder 2007] that the set of all one- step sound 
rules is always strictly one-step complete and that the proof system induced by a 
one-step complete set of rules is weakly complete, i.e. proves all valid formulas. 

In the further treatment, we need a further technical condition. 

Definition 3.9. A one-step rule <p/tp over V is infective if every variable in V 
occurs at most once in ij). 

Assumption 3.10. Wc assume for the remainder of the paper that the given rules 
in TZ are injective. This restriction will be satisfied by the naturally arising rule sets 
in our examples; it can always be forced by introducing new propositional variables 
and adding premises stating the equivalence to the original variables (e.g. a rule 

T/{Da Oa) can be replaced by (a ^ b)/{Da ^b))- 

Strictly one-step complete sets of rules are generally more complicated than one- 
step complete sets of rules or axioms [Pattinson 2003; Schroder 2007]. In our 
terminology, part of the effort of [Vardi 1989] and [Pauly 2002] is devoted to finding 
strictly one-step complete sets of rules. We now develop a systematic procedure for 
turning one-step complete rule sets into strictly one-step complete ones. For the 
following, recall that given clauses (f> and ip containing literals a and ^a, respectively, 
a resolvent of </> and ijj {at a) is obtained by removing a and -la from the clause 
(j)\/ ip. A set $ of clauses is called resolution closed if, for ^, e all resolvents 
of (j) and are propositionally entailed by some clause in This is generalised to 
rules as follows: 

Definition 3.11. A set TZ of one-step rules is resolution closed if it satisfies the 
following requirement. Let -Ri,i?2 G TZ, where Ri = (})\/tp\ and R2 = (p2/4>2- We 
can assume that Ri and R2 have disjoint sets Vi, V2 of propositional variables. Let 
La be in ^i, and let -iLb be in ^2 for some L G A, so that we have a resolvent 
•tp of tpi and 'tp2[a/b] at La; by Assumption 3.10, '0 is a clause over Up(y) where 
V = Vi U V2 — {a,6}. Then TZc is required to contain a rule R = (j)/tp such 
01 A (j)2[(i/b] \-pL 4"^ and \-pL 4' for some F-substitution a; in this case, R is 
called a resolvent of Ri and R2. 

Resolution closure will play a central role in the following development, as it forms 
the syntactic counterpart of strict one-step completeness. 

Remark 3.12. One can construct resolution closed sets by iterated addition of 
missing resolvents. Here, an obvious choice for a resolvent (p/ip of 4>i/tpi and 4>2/tp2 
as above is to take tp as the resolvent i/i of ipi and tp2, and (p as (pi A ^2[a/b], with a 
eliminated according to Remark 3.4 as a is not contained in tp by Assumption 3.10. 
It is clear that (pi A (p2[a/b]/')p is one-step sound if i?i and R2 arc one-step sound. 

Remark 3.13. Note that our approach is different to existing resolution-based 
approaches to decision procedures for modal logic (e.g. [De Nivelle et al. 2000]), 
which rely on translating modal logic into first-order logic. 
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Lemma 3.14. Let ■0 G C\{V), and /e< 7^ $ C C\{V) be resolution closed. Then 
^\-pL iff 4>^PL'^ for some ^ G 

Proof. The 'if direction is clear. 'Only if: W.l.o.g. is not a tautology. We 
can assume that V is finite and then prove the contraposition of the claim by 
induction over the size of V . Thus assume, recalling Lemma 3.2, that $ does not 
contain a subclause of i). Pick a clause X ^ ^ that contains a minimal number of 
literals not in -0 (this number is non-zero); w.l.o.g. x contains a positive literal a 
such that a is not in t/;. Remove all clauses containing a from $, and remove -la 
from the remaining clauses and from 1].), obtaining a new set $' of clauses and a 
new clause respectively. Then is resolution closed and does not contain a 
subclause of tl)' (otherwise there exists a clause p e $ whose only literal not in -0 
is -la, and resolving p with x yields a clause in $ with less literals not in -0 than x, 
contradiction). By induction we thus have a valuation r' for V — {a} satisfying 
but not ip' . We extend r' to a valuation r for V by putting T(a) = T; then r 
satisfies $ but not if). □ 

Lemma 3.15. TZ is resolution closed iffR-c is resolution closed. 

Proof. The 'if direction is trivial. The 'only if direction follows from the 
fact that every rule i? is a resolvent of R and any congruence rule, since rules are 
injective (Assumption 3.10). □ 

Theorem 3.16. Let TZ be one-step complete. Then TZ is strictly one-step com- 
plete iffTZ is resolution closed. 

Proof. '//'; Let X be a set, let r be a 7'(X)-valuation, and let x G CI(Up(F)) 
such that TX, t \= x] w.l.o.g. x is not a tautology. By one-step completeness, x is 
propositionally entailed by the (non-empty) set of clauses 

^ = {ijja I ^/tjj e TZc,<J a Prop(y)-substitution, X, r \= ^a}. 

The set ^ is resolution closed: for i = 1,2, let (f)i/4'i S Ti-c be a rule over Wi 
(with Wi, W2 disjoint), let cTj be a Prop(y)-substitution such that X,t \= 4>iai, 
and let tpiai and 1^2(^2 contain literals Lp and -^Lp, respectively. Thus, tpi and ■02 
contain literals La and -^Lb, respectively, where ai{a) = (J2{b) = p; let ip be the 
resolvent of ipi,tp2[a/b] at La, a clause over W = Wi U W2 — {a,b}. Then the 
resolvent of tpiai, 1^2(^2 at Lp is -tpa, where a acts like ai on Wi — {a} and like 1T2 on 
W2 — {b}. By resolution closedness of TZc (Lemma 3.15), we have 0/V' S Ti-c and a 
W^-substitution 6 such that 0i A 02 [a/^] I~pl 0^ and tpO \-pL V'- Then X,t \= <j)9a, 
so that tpOa G and tp9a \-pL ■0cr as required. 

By Lemma 3.14, it now follows that ipa \-pL X for some clause ipa in ^, where 
by Lemma 3.2 necessarily <t{v) G V for every variable v in ip. 

'Only if: Let 0i/V'2, 02/'02 G 7^ be rules over disjoint sets Vi,V2 of variables, 
where tpi contains La and ^p2 contains -1L6. Let ■0 denote the resolvent of 'ipi,^p2[a/b] 
at La, a clause over V = V1UV2 — {a, b}. Let X be the set of satisfying valuations 
for 01 A 02[a/6], and define the P(X)-valuation r by T(a) — {k E X \ K{a) = T}. 
Then X, r |= 0i A 02 [a/6] and hence TX,t |= ■0 by one-step soundness of TZ. By 
strict one-step completeness, it follows that there exists a rule 0/V' G TZc and a 
^-substitution a such that X,t \= <j)a and ipa \-pL i). By construction of X, r, we 
may conclude from X, r |= 0cr that 0i A 02 [a/6] \-pL (l>o- as required. □ 
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In summary, strictly one-step complete rule sets can be constructed by resolving 
the rules of a one-step complete axiomatisation against each other. Below, we give 
examples of strictly onc-stcp complete systems obtained in this way. In order to 
simplify the presentation for the case of graded modal logic and probabilistic modal 
logic, we use the following notation. If (f)i is a formula, ri G Z for all i G I, and 
fc G Z, we abbreviate 

r{J)<k 

where r{J) = "^^j^j^r "^^^ formula ^i^jTiai > k translates into the arithmetic 
of characteristic functions as suggested by the notation: 

Lemma 3.17. An element x G X belongs to the interpretation of J^iei ''^t'^i — ^ 
under a V{X) -valuation a iff 

^n'i-a{ai){x) > k, 

where 1a ■ X ^ {0, 1} is the characteristic function of AC X. 

Proof. The element x satisfies the negation of ^i^jTiai > A; iff r(J) < k for 

J ={iel\xe a{ai)} iff J2^eI rila{a,){x) < fc. □ 

We allow ourselves obvious variations of this notation, e.g. X) ai < X) bj in place 
of E^'j -Eoi > 0. 

In all the logics of Example 2.7, the resolution process, applied to known one-step 
complete rule sets, can be kept under control; by Theorem 3.16, the resulting rule 
sets are strictly one-step complete. 

Example 3.18. (1) MorfaZ /o^ic The empty set of rules is one-step complete 
for neighbourhood frame semantics (Example 2.7.3). This set is trivially resolution 
closed. 

(2) Modal logic M: The one-step rule 

^ ^ na^ab 

is one-step complete for monotone neighbourhood frame semantics (Example 2.7.3), 
and clearly resolution closed. 

(3) Modal logic K: The one-step rules 

a a Ab ^ c 

□a OaADb^ac 
are one-step complete for unrestricted Kripke semantics (Example 2.7.1), i.e. for 
the modal logic K [Pattinson 2003] . The resolution closure TZ of these rules consists 
of the rules 



A:=i - 

for all n e IN (here, strict one-step completeness is also easily seen directly). Note 
the similarity between this rule and a corresponding rule appearing in standard 
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cut-free sequent calculi for K [Troelstra and Schwichtenberg 1996]; the precise 
connection between resolution closure and cut elimination is the subject of further 
investigation. 

(4) Modal logic KD: The axiomatisation of K is extended to a one-step complete 
axiomatisation of KD (Example 2.7.2) by adding the rule -^a/^Ua. Closing the 
new rule set under resolution leads to the rules 

and ^/^-i"^ 



for all n € N (i.e. whore the rules of K apply only to positive Horn clauses, the 
rules of KD apply to arbitrary Horn clauses). 

(5) Coalition logic: In Lemma 6.1 of [Pauly 2002], the following set of one-step 
rules for coalition logic (Example 2.7.8), numbered as in loc. cit., is implicit: 

(1) wY-C: (2) TT^ (3) '^^^ 



Ti=xACi]ai ' ' \C\a ^ ' [0]aV[7V]6 

Ai'=i "i ^ ^> 

where n > 0, and rules (1) and (4) are subject to the side condition that the Cj are 
pairwise disjoint. 

As shown in [Pauly 2002], an axiomatization subsumed by rules (l)-(4) is complete 
for a language including prepositional symbols; onc-stcp completeness follows by 
Proposition 5.3 below. The rules are moreover 'nearly' resolution closed (full res- 
olution closure is not needed in [Pauly 2002] due to the use of a taylored notion 
of closed rule set). Resolving rule (4) with rules (2) and (3), one obtains the rule 
schema 

Ar=i tti ^ ^ V V^i Cj 



(4') 



Ar=i[CiK-[i5]&vvr=i[^^h 



where m,n > 0, subject to the side condition that the Cj are pairwise disjoint 

subsets of D\ this subsumes rules (2) (4) above. 

Resolution closedness of rules (1) and (4'): We discuss only the case of resolving 
(4') against itself; the other case is similar. Let one instance of (4') be denoted as 
in the rule schema, and another instance with all entities primed (a^ etc.). The 
two instances can be resolved in two essentially different ways. The subcase where 
matching is with [D]b is straightforward. Thus assume w.l.o.g. that matching is via 
[N]ci = [C[]a[. Then by the side conditions, D' = N and = for i = 2, . . . , n'. 
Thus, the resolvent has the conclusion 

K=i[Ci]ai A Ar=2[C>^ - [D]b V [N]b' V y]L,[N]cj V \/%AN]c^, 

which fits the format of the rule scheme (4'). It is easy to check that the combined 
premises imply the required premise for the resolved conclusion, and similarly for 
the side conditions. 

(6) Graded modal logic: The standard axiomatization of graded modal logic. 
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weakly complete for a language with prepositional symbols [Caro 1988], has axioms 

(Gl) On+ia Ond 

(G2) Do{a ^ 6) ^ 0„a ^ 0„6 

(G3) O!o(a A 6) ^ ((0!„,a A 0!„,6) ^ 0!„,+„,(a V 6)) 

where n,ni,n2 G N, used in a proof system including propositional reasoning and 
the congruence rule (so that (N) induces the ncccssition rule for Do). Here, 0!„(/) 
abbreviates On-i4> A ^On<l> for n > 0, and -iOq^ for n = 0. These axioms may be 
derived from the system of one-step rules 

c^aVb 



(RGl) — —— (Al) ^ ^ ^ . 

0„+ia^0„6 0„i+„2C^ 0„iaVO„26 

a V 6 ^ c 

a Ah ^ d , , ^" 



0„jaAO„26^ 0„i+„2+icVOod -.Ooa 

((Gl) and (A^) are easily derived from (RGl) and (RN), respectively; (G2) follows 
by (^1) taking n2 = 0; and (G3) may be derived using (Al) and (^2)). All these 
rules are subsumed by the rule schema 

where n, m > 0, subject to the side condition + !)>!+ Sjli (which 

entails that n and m cannot both be 0). One-step soundness of (G) follows from one- 
step soundness of the rule system for majority logic proved in the next example. By 
the preceding considerations, (G) is weakly complete, and hence one-step complete 
by Proposition 5.3. 

Resolution closedness of (G); Take two instances of (G), one denoted like in the 
general form of the rule and one with all entities primed (a^ etc.), with the resolution 
taking place w.l.o.g. by matching Ofe^a'i = Oji^i. The conclusion of the arising 
resolvent is 

n m m m' 

A ^fe-a^ ^ A ^k'M'i -> v Oi.bj V y oi>b'^. 

i=l i=2 i=2 j=l 

Since a[ = 6i, the premises a, < J2]Li Sr=i "-'i - Sjli ^'j ii^Ply 

i=l i=2 j=2 j=l 

and since ki = l[, the side conditions + — l+Sjli ^^^^ + — 
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n n' m m' 

+ 1) + + 1) > 1 + + E^^' 

i=l 1=2 j=2 j=l 

SO that we arrive again at an instance of (G). 

(7) Majority logic: in [Pacuit and Salame 2004], the extension of the axiomati- 
zation of graded modal logic with the axioms 

(Ml) MaAMb-^ OoiaAb) 

(M2) Ma ADoia-^b)^ Mb 

(M3) WaAWbAOn{^aA^b)^On{aAb) 

(M4) WaAMbA 0„ (-.o A -.6) 0„+i (a A b) 

is proved to be weakly complete for majority logic including propositional symbols. 
These axioms are derivable from the set of rules 

(^^1) TJTTTTTFTi: (^^2) 



WaVWb ' ' Wa^Wb\J Oqc 

-i(a Ac) ->a A 6 

-■(6 Ac) cM d 

aA&— >d , ^ 6— 5-c 

(^^3) . ,,,, . ^ „ . ^ , (iiM4) 



VKa A A 0„c 0„d ' ' l^a A 0„6 ^ VKc V 0„+id 

((M2), (M3) and (M4) follow directly from (i?M2), (i?M3) and (i?M4), respec- 
tively; (i?Ml) proves Ma ^ Wa, whence (Ml) is obtained from (i?M2)). These 
rules and rule (G) for GML are subsumed by the rule schema 

with side conditions X]r=i(^i + l)^EjLi 0) — Oandw— u>+27i > 

(take M = 1 for (EMI), u = for (i?M2), (i?M4), and (G), and u = -I for 
(i?M3)). Resolution closedness is checked analogously as for graded modal logic, 
covering the two cases of resolution at literals 0„a and Wa. respectively; in both 
cases, an instance of M„j_|_„2 can be taken as a resolvent of an instance of M„j and 
an instance of M^^ . 

One-step soundness of [Mu): Let t be a 7'(X)-vahiation such that X, r \= 
E"=i '^i + Er=i Cr + u< YJjLi bj + J27=i ^ ^ ^{^)- Using Lemma 3.17, 

we obtain by summation over x G X 

n V m w 

E B{a{ai)) + E B{a{cr)) + uB{X) < E B{a{bj)) + E B{a{ds)). 

i=l r=l i=l 5=1 

Now put p ~ \B{X)/2^ (with [x] = minjz S Z | z > x}) so that B satisfies Wa iff 
B{T{a)) > p. To establish that B is in the interpretation of the conclusion of M„, 
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it suffices to prove 

n m 

+ l) + vp + uB{X) >^lj+ w{p - 1) + 1. 

i=i j=i 

By the side conditions, this inequahty is equivalent to 

-2up + uB{X) + max(M, 0) > 0, 

which is easily established by distinguishing the cases B{X) — 2p and B{X) = 
2p-l. 

(8) ProbaMlistic m,odal logic: By reformulating the onc-stcp complete set of ax- 
ioms for probabilistic modal logic given by Cirstea and Pattinson [2007] as one-step 
rules and subsequently applying resolution, one obtains the rules 

,p . ELi ai+u< E^i bj 

where m,n > 0, m + n > 1, and u gZ, subject to the side condition 

Er=i Pi+u> E^i Qj and 
Er=i Pi+u> if m = 0. 

One-step completeness of (Pu)'- The rule schema is onc-stcp complete, as it sub- 
sumes the following axiomatisation that has been shown to be one-step complete 
in loc.cit.: 

(0) Loa (T) (>1) r^'^l^t , (P + 9>1) 

(1) , . , (P + g=l) 

Lpa V LqO 



(1) 



ELic. = e;=i'^ 



where di = di and dj = -^dj for j > 2, and rule (1) is subject to the side condition 



These rules are subsumed by the rule schema (Pu), as follows. Rule (0): take 
m = 1, n = 0, u = 0, qi = 0. Rule (T): take m = 1, n = 0, u = 1. Rule > 1: 
take n = 2, m = 0, « = —1. Rule (1): take n = 0, m = 2, m = —1. Rule (1): take 
m = 1, n = r + s — 1, M = 1 — s, and instantiate bi to q for i = 1, . . . , r, &i to di-r+i 
for i = r + 1, ... ,r + s — 1, ai to di, Qi to Ui for i = 1, ... ,r, qi to 1 — Vi-r+i for 
i = r + 1, . . . ,r + s — 1, and pi to vi. 

One-step soundness: Analogously to the previous example, using additionally that 
one always has P{X) = 1. 

Resolution closedness: Analogously as for graded modal logic; as a resolvent of an 
instance of P„i and an instance of P^^, one can take an instance of Pui+U2- 
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4. THE SHALLOW MODEL CONSTRUCTION 

We now present the announced generic shallow model construction, which is based 
on strictly onc-stcp complete axiomatisations. The construction generalises results 
from [Vardi 1989] (where the use of axiomatisations is implicit in certain lemmas). 

Definition 4.1. The set MA((/)) of (top level) modal atoms of a formula is 
defined recursively by MA{(j) A V) = MA{(j)) U MA{ip), M^(-.(/)) = MA{(p), and 
MA{Lp) = {Lp}. (Note that (f) G Prop{M A{(p)).) A pseudovaluation is a conjunc- 
tive clause H over Up(^(A)), represented as a set of literals (i.e. pseudovaluations 
are identified modulo contraction and reordering of literals, which does not aff'ect the 
set MA{H) of modal atoms). A pseudovaluation is consistent if it is consistent as an 
J^(A)-formula. We say that H is & pseudovaluation for <j) if MA{H) C MA{(f)) and 
H \-pL <t>- If is a rule in TZc and ct is a substitution such that V'f S Q.\{MA{H)) 
and H \-pL -^ipc^, then the negated instance -^(f)a of the premise is a demand of H. 

This generalises the notion of demand [Blackburn et al. 2001, Definition 6.43] to 
a coalgebraic setting. Note that by the dual of Lemma 3.2, all demands of a 
pseudovaluation H are contained in H when regarded as sets of literals, unless H is 
propositionally inconstent (i.e. contains both Lp and -^Lp for some modal atom Lp). 

Lemma 4.2. Every consistent formula has a consistent pseudovaluation. 

Proof. If </) is consistent, then one of the conjimctivc clauses from its disjimctive 
normal form (DNF) is consistent and hence is a consistent pseudovaluation for (j). □ 

Lemma 4.3. Every demand of a consistent pseudovaluation is consistent. 

Proof. By contraposition: Let H he a. pseudovaluation, and let (j)/tp he a rule 
in TZc such that ipcr G C\{MA{H)) and H \-pL ^ipa. If the demand -k^ct is incon- 
sistent, then (/>a is provable; hence, ^cr is provable using (j>/'4), and consequently H 
is inconsistent. □ 

Definition 4.4. A supporting Kripke frame of a T-coalgebra {X,£) is a Kripke 
frame {X, JC) (consisting of a set X and a transition relation fC C X x X) such that 
for each x £ X, 

ax) G T{y I xlCy} C TX. 

Lemma and Definition 4.5. If a coalgebra C = (X, $) is equipped with a sup- 
porting Kripke frame {X,1C), then for every state x G X, the set X^ of states 
reachable from x in (X, /C) is the carrier of a subcoalgebra = {X^, ^x) of C, the 
submodel generated by x. 

Note that by Proposition 2.5, y ^c-^ 4' '^^ U \=c <!> for y G Xx- 

Definition 4.6. A shallow tableau is a Kripke frame (X, /C) with a distinguished 
root Ho E X such that X is a set of pseudovaluations, every state is reachable 
from Ho, for all if, G G X, 

HJCG =^> G is a pseudovaluation for a demand of H, 

and for every demand <j) of H £ X there exists a pseudovaluation G G X for ^ such 
that HK,G. Given a formula 0, a shallow tableau for (/> is a shallow tableau whose 
root is a pseudovaluation for (j). 
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A shallow tableau model is a T-coalgebra C = which has a supporting 

Kripke frame {X, K) such that {X, K) is a shallow tableau and the truth lemma 

H\-pLX =^ H \=c X for all ^(A)-forniulas x 

holds for all -ff e X (hence in particular H \=c x if -f^ is a pseudovaluation for x)- 

A shallow tableau is almost a dag, except that in the presence of the rule -L/-L (cf. 
Section 3) the pseudovaluation T is a pseudovaluation for one of its own demands. 

Explicitly: 

Proposition 4.7. A shallow tableau {X,JC) with root Hq is, up to a possible 
loop at the state T, a dag of depth at most the depth of Hq, and the branching 
degree at H G X is exponentially bounded in \H\. 

Proof. The first claim follows from the fact the the depth of all demands of 
a pseudovaluation H is strictly less than the depth of H. To prove the bound on 
branching, note that pseudovaluations for demands of H are conjunctive clauses 
over the set of subformulas of H. □ 

Lemma 4.8. If a formula (j) has a pseudovaluation Hq such that all demands of 

Hq are consistent, then there exists a shallow tableau for (f>. 

(By Lemmas 4.2 and 4.3, the conditions of the above lemma hold in particular if (j) 

is satisfiable.) 

Proof. Let Z consist of Hq and all consistent pseudovaluations, and for H,G € 
Z put HiCG iff G is a pseudovaluation for a demand of H. Let {X,1C) be the 
subframe of {Z, K) generated by Hq (i.e. X is the set of states reachable from Hq in 
[Z, K,), and IC = K.ri{X x X)). By the assumption on Hq and Lemmas 4.2 and 4.3, 
{X, K) is a shallow tableau for (j). □ 

Theorem 4.9. IfTZis strictly one-step complete, then every shallow tableau is 
a supporting Kripke frame of a shallow tableau model. 

Proof. Let {X, IC) be a shallow tableau; wc have to construct a shallow tableau 
model C = {X, £,) for which {X, JC) is a supporting Kripke frame. To begin, note 
that to ensure the truth lemma, it suffices that C is coherent in the sense that for 
H eX a,ndY = {G\ HK.G}, 

H \-pl Lp <^ ^{H) e iLlyiG €Y\G\=Cap} for all Lp G MA{H) 

(cf. Lemma and Definition 4.5) : note that {G eY\G |=Cg p} — IpIc^^' ^o that 
by naturality of predicate liftings, coherence implies that 

H hpL Lp ^ H\=c Lp for all Lp e MA{H). 

The extension to propositional consequences of H is then straightforward (noting 
that for Lp G MA{H), either H \-pL Lp or H \-pL -^Lp). 

We construct a coherent coalgebra structure ^ by induction over the depth of 
pseudovaluations. Thus, let H G X, put Y = {G \ HfCG}, and assume that ^ is 
already constructed for all pseudovaluations of smaller depth in X, in particular for 
all states G reachable from H in {X, K). Thus, the submodel Cq generated by such 
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a state G is already defined, and coherence at G is unaffected by the construction 

We have to prove that there exists ^(i?) S TY C TX satisfying the coherence 
condition. Assume the contrary. Let V be the set of prepositional variables bp, 
where Lp e MA{H) for some L. Let 9 € CI(Up(y)) consist of the literals -^Lbp 
for Lp G H and Lbp for -^Lp G H. By assumption, TY, ^ 9, where is the 
7-'(F)-valuation taking bp io {G ^Y \ G \=Cg p}- By strict one-step completeness, 
it follows that V"? I~pl 9 for a rule ^/ijj in TZc and a F-substitution r] such that 
Y,T^ \= (j)rj. By construction of 9, H \-pi -^9a and hence H ^pl -^iprjcr. Thus, 
-KpTja is a demand for H, and hence there exists in y a pseudovaluation G for -xprja. 
By the truth lemma for G, G \=Cg in contradiction to Y, \= 0ry. □ 

Corollary 4.10. // TZ is strictly one-step complete, then the following are 
equivalent for an {A) -formula </>. 

(1) (j) is satisfiable. 

(2) (j) is consistent. 

(5) (p has a pseudovaluation H such that all demands of H are consistent. 

{4 ) <p has a pseudovaluation H such that all demands of H are satisfiable. 

(5) There exists a shallow tableau for (j). 

{6) (j) is satisfiable at the root of a shallow tableau model. 

(2): By soundness. 
By Lemmas 4.2 and 4.3 
By Lemma 4.8. 
By Theorem 4.9. 
Trivial. 

By the equivalence (1) <s=^ (2) already established. □ 

The above implies in particular that the proof system is weakly complete, i.e. proves 
all valid formulas; this reproves a result of [Pattinson 2003]. By Remark 3.8, we 
obtain moreover that coalgebraic modal logic has the shallow model property: 

Corollary 4.11 Shallow model property. Every satisfiable ^{A)- 
formula (j) is satisfiable in a shallow model, i.e. in a T-coalgebra that has a 
supporting Kripke frame {X,JC) which has final state x-[-, i.e. XtICx implies 
X = XT, and which, up to a possible loop at xt, is a dag of depth at most the depth 
of (j) and of size at most 3", where n is the number of subformulas of (p. 

Proof. All that remains to be checked is the bound on the size: every state in 
a shallow tableau is a set representing a conjunctive clause over subformulas of (p, 
in which a given subformula may occur as a positive literal, as a negative literal, or 
not at all. □ 

5. SHALLOW PROOFS 

The satisfiability criterion of Corollary 4.10 can be rephrased in terms of a shal- 
low proof property. This property can be proved semantically by dualising Corol- 
lary 4.10, as done in the proof of Corollary 5.1 below. Alternatively, the shallow 
proof property can be established purely syntactically, without any reference to 



Proof. (1) 

(2) ^(3): 

(3) ^(5): 

(5) ^(6): 

(6) =^(1): 
(3)^(4): 



PSPACE Bounds for Rank-1 Modal Logics • 19 



models; we present such an argument in the proof of Theorem 5.2 below. The shal- 
low model construction presented in the previous section is however of independent 
interest. 

Corollary 5.1 Shallow Proof Property. LefR he strictly one-step com- 
plete. Then an J-" (A) -formula (j) is provable iff for each clause p in the conjunctive 
normal form (CNF) of (j), there exists a rule xli^ ^ T^c o,nd a substitution a such 
that ipa \-pL p and provable. 

Proof. The 'if direction is trivial; we prove 'only if. Dualizing the implication 

(3) => (2) in Corollary 4.10 yields 

if (j) is provable then each pseudovaluation H for -i<p has a demand x 
such that -1% is provable. 

Now let phea clause in the CNF of 0. Then -ip is a conjunctive clause in the DNF 

of -!(/), in particular a pseudovaluation for -'(p. By the above condition, there exists 
a rule x/V" € TZc and a substitution a such that -^p \-pL ~^ipo', hence ijja [-pL p, 
and X'^ is provable. □ 

In a purely syntactic formulation of the shallow proof property, we have to replace 
strict completeness by closedness under resolution. The statement thus takes the 
following form. 

Theorem 5.2 Shallow Proof Property. Let Tl be resolution closed. Then 
an -formula (p is provable under TZ iff for each clause p in the CNF of (j), there 
exists a rule x/i^ & TZc and a substitution a such that ipa \-pL p and xc is provable. 

(This reproves Corollary 5.1, as strict one-step completeness implies resolution 

closedness by Theorem 3.16.) 

Proof. Again, 'if is trivial, and we prove 'only if. Let (j) be provable, and 
let p be a clause in the CNF of cf). Then p is provable. By definition of the proof 
system, p is propositionally entailed by the set of clauses 

$ = {ipa I x/V' G T^CiX^ provable}. 

One shows analogously as in the 'if direction of the proof of Theorem 3.16 that 
is resolution closed. By Lemma 3.14, there exists i)a in $ such that ipa \-pL P- □ 

We hope that both proofs of the shallow proof property provide a handle for gen- 
eralizations to logics outside rank 1. 

One application of the shallow proof property is 

Proposition 5.3. Let K contain an infinite set U of prepositional symbols, mod- 
elled as in Remark 2.8 over a functor Tjj of the form Ti/X = TX x P{U). Then 
the proof system induced by TZ is weakly complete iff TZ is one-step complete. 

Proof. W.l.o.g. TZ is resolution closed (one can close under resolution, thereby 
affecting neither completeness nor onc-stcp completeness). The 'if direction is 
known (cf Remark 3.8). To prove the 'only if direction, let ip £ CI(Up(y)), let X 
be a set, and let r be a 'P(X)-valuation such that TuX, t \= tp. Since U is infinite 
and V may be assumed to be finite, we can assume w.l.o.g. that V CU. Let (p denote 
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the prepositional theory of r, i.e. the conjunction of ah contracted clauses x over V 
such that X,T \= x- Then one checks as in the proof of Theorem 17 in [Schroder 
2007] that the rule (f)/ijj is onc-stcp sound. By Lemma 16 in [Schroder 2007], there 
exists a Prop(y)-substitution a such that (j)a and (p ^ {a ^ cr(a)) (for each a & V) 
are propositional tautologies. Since V CU, we can regard ^ct as an ^(A)-formula. 
As such, (pa- is valid. By soundness of (p/ip, it follows that tpa, again regarded as an 
J^(A)-formula, is valid, hence provable by weak completeness. By the shallow proof 
property (Theorem 5.2), there exist a rule x/p over W and a Prop(V')-substitution 6 
such that x^ is provable and p6 \-pL ipiy- By Lemma 3.2 and Assumption 3.10, it 
follows that there exists a ^-substitution k such that a{K,{b)) = 0{b) for all b ^ W 
and pK \-pL ip- 

It remains to prove that X,t \= xk. From X.t \= (p and the construction of cr, 
we obtain X,t \= a ^ a{a) for all a G V and hence X,t \= K{h) ^ 9{b) for all 
h e W, so that the goal follows from X,t \= x^- □ 

Remark 5.4. In the above result, the assumption that A contains enough propo- 
sitional symbols is essential. E.g. in cases like coalition logic or probabilistic modal 
logic where the logic collapses into triviality without propositional symbols, the 
empty set of rules is complete, but not one-step complete. 

The proof- theoretic content of Theorem 5.2 goes beyond the mere fact that proofs 

arc shallow. The theorem asserts that if the rule system is resolution closed, then 
propositional reasoning can always be limited to decomposing a formula into the 
clauses of its CNF and propositional entailment (i.e. by Lemma 3.2 essentially 
containment) between clauses. Moreover, shallow proofs witness a weak subformula 
property: every provable formula has a proof that mentions only propositional 
combinations of subformulas. Formally: 

Theorem 5.5 Weak subformula property. Suppose that TZ is resolution 

closed and (p is derivable under TZ. Then there exists a proof of <p that mentions 
only propositional combinations of subformulas of (p. 

Proof. Assume that (p is derivable under TZ and p is a clause of the CNF of cp; 
w.l.o.g. p is not a tautology. By Theorem 5.2 we find a rule x/V' € TZ and a 
substitution a such that ^ja \^pl P and xcr is provable under TZ; by Lemma 3.2, p 
contains ipa, hence we can assume w.l.o.g. that a maps propositional variables to 
subformulas of p. As x is a purely propositional formula, the substituted premise 
Xcr is a propositional combinations of subformulas of p, hence also of (p. The claim 
now follows inductively. □ 

As a consequence, it is immediate that ^(A) is a conservative extension of any 
sublanguage .F(Ao) induced by a sub-signature Aq C A: 

Corollary 5.6 Conservativity. Suppose TZ is resolution closed, Aq C A is a 
sub-signature and TZq consists of those (p/ip S TZ that mention only modal operators 
in Aq. Then a formula (p e J^{Aq) is TZ-derivable iff it is TZo-derivable. 

In particular, if TZ is weakly complete for T{A), then TZq is weakly complete 
for J^iAo). 

Example 5.7. Prom completeness of the rules (M„) for majority logic (Exam- 
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pie 3.18.7), we obtain that the rules 

{Wu) e z) 

with side conditions w; — 1 — max(u, 0) > and v — w + 2u > form a complete 
axiomatisation of the majority operator W alone. (Pauly [2005] considers a similar 
language, but without nesting of modal operators in formulas.) 

6. A GENERIC PSPACE ALGORITHM 

Wc will now exploit the shallow model result (Corollary 4.10) to design a decision 
procedure for satisfiability in the spirit of [Vardi 1989]. This requires one more 
preparatory step: since resolution closed rule sets are in general infinite, we must 
ensure that we never need to instantiate a rule in such a way that the conclusion 
contains the same literal twice; otherwise, determining the demands of a given 
pseudovaluation (Definition 4.1) might require checking infinitely many rules. This 
is formally captured as follows. 

DefinifAon 6.1. An instance (pa /tpa of a rule (p/il) is contracted if the clause ijja is 
contracted (Definition 3.1). In this case, if is a pseudovaluation (Definition 4.1) 
such that t/icr G (i\{MA{H)) and H \-pL ^ipcr, the demand ^(pa of H is called an 
essential demand. We say that a set TZ of rules is closed under contraction if for 
every instance (j)a/ipa of a rule (p/tp over V in TZ, there exists a contracted V- 
instance (j)' a' / tjj' a' of a rule 0'/"^' S such that tp'a' propositionally entails ^pa 
and (j)a propositionally entails p'a'. 

I.e. a rule set is closed under contraction if every instance of a rule that duplicates 
literals in the conclusion can be replaced by a contracted instance of a different rule. 
Not all the rule sets discussed in Example 3.18 satisfy this property, but they can 
easily be closed under contraction: just add a rule (p'/ijj' for every rule ^/V' over V 
in TZ and every F-substitution a, where </>' is some suitably chosen propositional 
equivalent of (pa and ip' is obtained from ipa by removing duplicate literals. It is 
clear that the new rules remain one-step sound. Note that extending the rule set 
trivially preserves strict one-step completeness, so that there is no need to close the 
extended rule set under resolution again. 

For convenience, we introduce further notation for propositional formulas: if 
r e Z — {0} and (/> is a formula, then we put 

S5n(r)</.= |^^ 

Example 6.2. (1) The strictly one-step complete rule sets of Examples 3. 18.1- 
5 {E, M, K, KD, and coalition logic) are easily seen to be closed under contraction, 
essentially because in all relevant rule schemas, the premise is a clause of the same 
general format as the conclusion. 

(2) Graded modal logic: The rule schema (G) of Example 3.18.6 fails to be closed 
under contraction, as duplicating literals in the conclusion substantially affects both 
the premise and the side condition. We can close (G) under contraction as described 
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above; this results in the rule schema 



where n > 1 and ri 




(3) Majority logic: Similarly, closing the rule schema {Mm) for majority logic 
under contraction yields the rule schema 



and 2m — ^ sj > 0. 

(4) Probabilistic modal logic: The rule schema (Pfe) of Example 3.18.8 fails to 
be closed under contraction. Closure under contraction as described above leads to 
the rule schema 



Vi<i<„ sgn{ri)Lp,ai 
where n> 1 and ri, . . . , r„ S Z — {0}, subject to the side condition 

if Vi. r, < then Yh=i '''iPi < ^• 
The crucial property of contraction closed rule sets is 

Lemma 6.3. IfV. is closed under contraction, then all the demands of a pseu- 
dovaluation are satisfiable iff all its essential demands are satisfiable. 

Proof. The 'only if direction is trivial. We prove 'if: Let TZ be closed un- 
der contraction. Then also TZc is closed under contraction, since instances of the 

congruence rule never contain duplicate literals. Thus, every demand of a pseu- 
dovaluation H is propositionally entailed by an essential demand. □ 

Thus we can extend Corollary 4.10 as follows. 

Corollary 6.4. If TZ is strictly one-step complete and closed under contraction, 
then an T{K)-formula ^ is satisfiable iff cj) has a pseudovaluation H such that all 
essential demands of H are satisfiable. 

In the algorithm suggested by Corollary 6.4, we will encode demands, which are 
themselves too large to be passed around directly, by the rules that induce them. 
Here, we need to represent rules by suitable codes, i.e. strings over some alphabet, 
since a naive direct representation of rules would in particular have to deal with 
rule premises of potentially exponential size. 

Definition 6.5. We say that a rule R G TZ matches a clause p = VlLi ^i-^i'Pi 
if the conclusion of R is of the form Vr=i ^iLiOi. In this case, let a{R,p) denote 
the arising substitution [^i/ai]i=i, ...,„. Two rules matching the same clause are 
equivalent if their premises are propositionally equivalent; equivalence classes [R] 
are called TZ-matchings. The code of R is also a code for [R] . 




{P'k) 
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We fix sonic size measures for the representation of formulas and rules: 

Definition 6.6. The size size{a) of an integer a is [log2(|a| + 1)], where [r] = 
min{^; G Z \ z > r} as usual. The size size{p) of a rational number p = a/b, with 
a, b relatively prime, is 1 + size{a) + sizeib). The size of a formula (j) over V is 
defined by counting 1 for each propositional variable, boolean operator, or modal 
operator, and additionally the size of each index of a modal operator. (In the 
examples, indices are either numbers, with sizes as above, or subsets of {1, ... , n}, 
assumed to be of size n.) 

Assumption 6.7. We assume a reasonable encoding of modal formulas in which 
boolean operators take up constant space and modal operators take up space ac- 
cording to a given coding of A; we assume that this coding is in NP (i.e. it is 
decidable in NP whether a given code is a valid code for a modal operator in A). 
Graded or probabilistic modal operators are assumed to be coded in binary, with 
sizes according to Definition 6.6. 

Example 6.8. For the rules of Examples 3.18 and 6.2, we just take the parameters 
of a rule as its code in the obvious way. E.g. the code of an instance of (P^) 
as displayed in Example 6.2.4 consists of n, fc, the r^, and the pi. The size of 
the code is determined by the sizes of these numbers plus separating letters, say, 
^(1 + size{ai)) + ^(1 + size{pi)) + size{n) + size{k) + 1. Note that not all such 
codes represent instances of (ffe). 

The following decision procedure on an alternating Turing machine generalises the 
PSPACE algorithms in [Vardi 1989], given a strictly one-step complete and con- 
traction closed rule set TZ. 

Algorithm. 6.9. (Decide satisfiability of (6 G .?^(A)) 

(1) (Existential) Guess a propositionally consistent pseudovaluation H for (j). 

(2) (Universal) Choose a contracted clause i / p over MA{H) such that H\-pi, -ip. 

(3) (Universal) Ghoose an 7?.c-matching [FC\ of p. 

(4) (Existential) Guess a clause 7 from the CNF of the premise of R. 

(5) Recursively check that -^'ja{R,p) is satisfiable. 

The algorithm succeeds if all possible choices at steps marked universal lead to 
successful termination, and for all steps marked existential, there exists a choice 
leading to successful termination. Concerning Step 1, note that the only way for a 
pseudovaluation to be propositionally inconsistent is to contain both Lp and -iLp 
for some modal atom Lp. 

We emphasise that in Step 3, it suffices to guess one code for each matching. 

Proposition 6.10. Algorithm 6.9 succeeds iff the input formula (j) is satisfiable. 

Proof. Induction over the depth n oi (j). If n = 0, then the propositional for- 
mula (j) will evaluate to either T or _L, as it does not contain any propositional 
variables; moreover, the only candidate for a pseudovaluation for (j) is the empty 
conjunctive clause T. Thus, the algorithm terminates unsuccessfully in the existen- 
tial step (1) iff <f) evaluates to _L, since T is a pseudovaluation for ^ iff evaluates 
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to T. Otherwise, the algorithm terminates successfully in the universal step (2), 
since the only clause p over MA(T) = such that T hp^ -ip is ±. For n > 0, cor- 
rectness of the algorithm follows from Corollary 6.4 and the inductive hypothesis: 
the essential demands of 4> are the negated premises -^4'a{(j)/ip, p) for 7?,c-matchings 
[4>/i^] of contracted clauses p as in the algorithm, and such a demand is satisfiable 
iff the negation of one of the clauses in the CNF of (pa{(l)/'tjj, p) is satisfiable. □ 

Remark 6.11. In Step 1 of Algorithm 6.9, it suffices to consider the conjunctive 
clauses in some DNF of </> rather than all pseudovaluations. A canonical, if not 
necessarily the most effective choice for such a DNF is to take all pseudovaluations H 
for (j) such that MA{H) = MA{(j}) (rather than only MA{H) C MA{(j)))] in a concrete 
implementation, a heuristic procedure for determining some DNF effectively may 
be preferable. 

Note that due to the non-deterministic nature of the algorithm, the above propo- 
sition docs not imply decidability of J^{h.). This follows only if the algorithm 
respects suitable resource bounds. We are interested in cases where the algorithm 
runs in polynomial time. The crucial requirement for this is that Steps 3 and 4 
can be performed in polynomial time, i.e. by suitable nondcterministic polynomial- 
time multivalued functions (NPMV) [Book et al. 1984]. We recall that a function 
/ : S* ^ P(A*), where S and A are alphabets, is NPMV iff 

(NPMVl) there exists a polynomial p such that \y\ < p{\x\) for all y e f{x), 
where | • | denotes size, and 

(NPMV2) the graph {{x,y) \ y e f(x)} of / is in NP. 

This motivates the following conditions: 

Definition 6.12. A set of rules is called PSPACE -tractable if there exists a 
polynomial p such that all 7^-matchings of a contracted clause p over have 
some code of size at most p{\p\) (recall that matchings are equivalence classes of 
rules and thus may have several codes), and it can be decided in NP 

(1) whether a given code is the code of some rule in TZ: 

(2) whether a rule matches a given contracted clause; and 

(3) whether a clause belongs to the CNF of the premise of a given rule. 

Theorem 6.13 Space Complexity. Let TZ be strictly one-step complete, 
closed under contraction, and PSPACE -tractable. Then the satisfiability problem 
forf{A) is in PSPACE. 

Proof. Since TZ is P^/M Ci?-tractable, so is TZc, assuming reasonable codes for 
the congruence rules (e.g. consisting of the representation of the relevant modal 
operator; cf. Assumption 6.7). Thus, the functions mapping a clause p to the set of 
its T^c-matchings and a rule to the set of clauses occurring in the CNF of its premise, 
respectively, are NPMV: in the former case, the polynomial bound required by 
condition (NPMVl) is ensured by the definition of PS'PA Ci?-tractability, as we only 
need to produce one code for each matching, and in the latter case, the polynomial 
bound holds universally, as clauses are of polynomial size. Condition (NPMV2) 
is ensured explicitly by Definition 6.12 and Assumption 6.7 (which implies that 
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the set of formulas is in NP). Therefore, Steps 3 and 4 in Algorithm 6.9 can be 
performed in polynomial time. Steps 1 and 2 have polynomial runtime without 
specific assumptions, as a pscudovaluation H for (j) is represented as a set of literals 
and must by definition satisfy MA{H) C MA{(j)), and the contracted clause p chosen 
in Step 2 is constructed as a non-repetitive list of literals whose negations belong 
to H. Since the depth of recursion is bounded by the depth of (p, it follows that 
the algorithm runs in APTIME = PSPACE [Chandra et al. 1981]. □ 

Remark 6.14. A more careful analysis of Algorithm 6.9 reveals that it suffices for 
the decision problems in Definition 6.12 to be in PH , the polynomial time hierarchy. 
In our examples, however, the complexity is in fact P rather than NP. We expect 
that this situation is typical, with the crucial condition for _P5iM Ci?-tractability 
being the polynomial bound on 7?,-matchings. We are not aware of any natural 
examples of intractable rule sets (contrived examples are easy to construct, e.g. by 
imposing computationally hard side conditions). 

Remark 6.15. Algorithm 6.9 can be dualised to yield a proof-search procedure 
that determines whether (p G C{A) is 7?.-dcrivable, thus implementing the shallow 
proof property (Corollary 5.1/Theorem 5.2). Note that the dualisation entails that 
the roles of existential and universal steps are interchanged. 

In the treatment of graded and propositional modal logic, the polynomial bound 

on rule codes follows rather directly from size estimates in integer linear pro- 
gramming, as follows. Following usual practice, we take the size \W\ of a ra- 
tional inequality W = {J27=i''^i^i oP ^o), op G {<,<,>,>} and G Q, to be 
1 + n + X]"^Q size{ui). We recall that for n G Z, sgn{n) = — 1 if n < 0, sgn{n) = 1 
if n > 0, and sgn{n) = if n — 0. 

Lemma 6.16. For every rational linear inequality W and every solution 
ro, ■ ■ ■ ,rn G J. ofW, there exists a solution sq, ■ ■ ■ ,Sn G Z ofW such that sgn{si) = 

sgn{ri) for all i, the propositional formulas ^i^^i ^ •^o o,nd r^ai > ro (cf. 

Section 3) are equivalent, and size{si) < 18|VK|^ for all i. 

Proof. Let V = {ai,...,a„}, and let xo,...,Xn be the variables in W. We 
note that a propositional formula ^^^iSiUi > so is equivalent to ^ = Y^^=i ''"i^^i ^ 
ao iff for all valuations v : V —>^ {0, 1}, one has X^j^x Sii^io-i) > so if and only 
if ''"i^i'^i) ^ ^0, read as integer linear inequalities. Thus, let / denote the 

system of inequalities consisting of W and additional inqualities F, and Ei,, where 
i = 1, . . . ,n, V ranges over valuations V {0, 1}, 



Then the claim translates into the statement that / has a solution of polynomially 
bounded size in \W\. 



Xi > 1 ii ri > 1 
Fi= lxi = if = 

Xi < —1 if < — 1 



(where the middle case actually corresponds to two inequalities), and 
P _ jj2i=i Xtv{a,) > xo if J2"=i riv{ai) > ro 
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It follows from [Schrijver 1986, Corollary 17.1b] that / has a solution whose size 
is bounded by 6c(n+ 1)^, where c is the facet complexity of the system, i.e. the size 
of the largest inequality in /. As the cofficients of the inequalities and Fi arc 
of size at most 1, we have c < \W\ + 2{n + 1). Since moreover \W\ >n + l, I thus 
has a solution of size at most 18|W^|*. □ 

We now illustrate how Theorem 6.13 allows us to establish PSPACE bounds for 
many modal logics in a uniform way. 

Example 6.17. Conditions (1) and (2) of Definition 6.12 are immediate for all 
the rule sets of Example 3.18 — the decision problems in question involve no more 
than checking computationally harmless side conditions in the case of Condition (1) 
(disjointness and containment of finite sets, linear inequalities), and comparing 
clauses of polynomial (in fact, linear) size in the case of Condition (2). Moreover, 
Condition (3) is immediate in those cases where the premises of rules are just single 
clauses. This leaves only GML and PML; but the expansion of Xlie/ '''i^i > k to 
a propositional formula is already in CNF, and checking whether a given clause 
belongs to this CNF is clearly in P. 

It remains to establish the polynomial bound on the matchings. For GML and 
PML, this is guaranteed precisely by Lemma 6.16. In all other cases, every con- 
tracted clause p matches at most one rule, whose code has size linear in the size 
of p. 

We thus have obtained PSPACE-tTactahility and hence decidabihty in PSPACE 
for all logics in Example 3.18. The logics E and M are of lesser interest here, being 
actually in NP [Vardi 1989]. We briefly comment on the algorithms and bounds 
for the other cases. 

(1) For the modal logics K and KD (Examples 3.18.3 and 4), Algorithm 6.9 is 
essentially the witness algorithm [Ladner 1977; Vardi 1989; Blackburn et al. 2001]. 
Both logics are PSPACE-haxd [Ladner 1977]. 

(2) For coalition logic (Example 3.18.5), wc arrive, due to minor differences of 
the rule sets, at a slight variant of Pauly's PS PA CE-algoiithm [Pauly 2002]. 

(3) For graded modal logic, we obtain a new algorithm which confirms the known 
PSPACE upper bound [Tobies 2001]. One might claim that the new algorithm is 
not only nicely embedded into a unified framework, but also conceptually simpler 
than the constraint-based algorithm of [Tobies 2001] (which corrects a similar but 
incorrect algorithm previously given elsewhere, and refutes a previous EXP TIME 
hardness conjecture). Graded modal logic is PSPACE-haxd, as it extends K. 

(4) For probabilistic modal logic, we obtain a new algorithm which confirms 
the PSPACE upper bound that follows from the corresponding bound for the 
more expressive (modal) logic of probability, a proof of which is sketched in [Fagin 
and Halpern 1994]. The bound is tight, as PML contains the P^P^ CE-complete 
logic KD as a fragment (embedded by mapping □ to Li). In comparison to the 
algorithm in loc. cit., our algorithm has additional proof theoretic content as dis- 
cussed in Section 5. Under the correspondence outlined in Remark 6.15, it finds 
proofs which remain within PML rather than possibly diverting via a more expres- 
sive logic. 
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(5) Our PSPACE upper bound for majority logic, which appeared for the first 
time in the conference presentation of [Schroder and Pattinson 2006], tied in a pri- 
ority race with [Dcmri and Lugicz 2006] , where a PSPA CE upper bound was proved 
for the more expressive Presburger modal logic using a different type of algorithm. 
The same remarks concerning proof-theoretic content apply as for probabilistic 
modal logic. 

7. CONCLUSION 

Generalising results by Vardi [1989], we have shown that coalgcbraic modal logic has 
the shallow model property, and we have presented a generic PSPACE algorithm 
for satisfiability based on depth-first exploration of shallow models. We have thus 

— reproduced the witness algorithm for K and KD [Blackburn et al. 2001] 

— obtained a slight variant of the known PSPACE algorithm for coalition 
logic [Pauly 2002] 

— obtained a new PSPA CE algorithm for graded modal logic, recovering the known 

PSPACE boimd [Tobies 2001] 

— obtained a new PSPACE algorithm for probabilistic modal logic [Larsen and 
Skou 1991; Heifetz and Mongin 2001], recovering a PSPACE upper bound which 
follows from results sketched in [Fagin and Halpern 1994] . 

— obtained, simultaneously with [Demri and Lugiez 2006], a new PSPACE upper 
bomid for majority logic [Pacuit and Salame 2004]. 

In all these cases, the PSPACE upper bound is tight. Our algorithm may alter- 
natively be viewed as traversing a shallow proof that witnesses a weak subformula 
property. 

The crucial prerequisite for the generic algorithm is an axiomatisation by so-called 
one-step rules (going from rank to rank 1) obeying two closedness conditions: 
closedness under resolution and under contraction, i.e. removal of duplicate literals. 
In the examples, it has not only turned out that it is feasible to keep this closure 
process under control, but also that the axiomatisations obtained have pleasingly 
compact presentations typically, one ends up with a single rule schema. 

It has been shown that every modal logic can be equipped with a canonical 
coalgebraic semantics, provided it is axiomatisable in rank 1 and satisfies the con- 
gruence rule [Schroder and Pattinson 2007b]. This means in particular that our 
shallow model construction applies to every such modal logic when equipped with 
the canonical semantics. Moreover, the PSP^CB-algorithm presented here can be 
made modular w.r.t. heterogeneous combination of systems and modal logics using 
multi-sorted coalgebra [Schroder and Pattinson 2007a]. The extension of the theory 
beyond rank 1 is the subject of future research, as is the treatment of simple fixed 
point operators, possibly using automata theoretic methods [Vardi 1996; Venema 
2006] or pseudomodels [Emerson and Halpern 1985] . A further point of interest is 
to investigate the connection between our notion of resolution closure and classical 
proof-theoretic issues such as cut elimination and interpolation. 
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